fixing 403 forbidden error